---
title: Windows IIS Anonymous Authentication Strategy
slug: kronpam-reference-guide-3-9-0/windows-iis-anonymous-authentication-strategy
docTags: 
createdAt: 2024-12-02T14:46:07.177Z
---

This section explains how to change the password of the user-defined for IIS Anonymous Authentication using Application Configuration and Trigger.

WinRM service must be installed on the target device.

Users must have configured IIS information for this option in a similar manner to the example below.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/DllBX8CDG_PLh8I46T5Z6_image.png "IIS Anonymous Authentication")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/8Uzp9vx0MIcrvob4sj-MH_image.png "IIS Anonymous Authentication")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/0H_zjsos2A3yHNKurFs3R_image.png "IIS Anonymous Authentication - Specific User")

For this option, an Application Trigger Config definition must be made first. 

1. Navigate to** Secrets > Configurations menu > Application Configuration.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/rbDpDDSerkDRFSTlkhmW0_image.png "Application Configuration")

- Click **Add **and the parameters must be entered as shown below.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/fFciDCqD2xBNeSy5_K2pn_image.png "Application Configuration")

1. Select Windows IIS Anonymous Authentication as the **Strategy.**
2. Enter the WinRM port. (IIS Anonymous Authentication uses the WinRM service.)
3. Select **NTLM **as the WinRM Authentication Method and press the** Save **button.
4. Open the **Secrets > Application Management** screen.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/_r1gMxlL9v70grJYxMzEM_image.png)

- Click the **Add** button.

With this definition, when the Vault account's password is changed, reset, or updated, a trigger is generated for IIS Anonymous Authentication to automatically change the password on the target device.

- Enter the name of the trigger in the Name field.
- Select the **Application Configuration** that fits.
- Enter the **IIS Site's Name** field from IIS shown in the picture below.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/wGvWiM4JlCwXzfvE4PKid_image.png" size="72" width="663" height="505" position="center" caption="Windows IIS Default Pool Configuration Screen" darkWidth="663" darkHeight="505" showCaption="true"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/B1XPqI4gTB9nD-GdA6o0j_image.png" size="54" width="387" height="401" position="center" caption="Application Configuration Screen" darkWidth="387" darkHeight="401" showCaption="true"}

1. Select the Vault Account that is defined in Password Vault and whose password we want to change.
2. If the user defined for Password Vault is an authorized user to make changes on IIS, the **Use Authentication User **switchbox should remain off. If it is not an authorized user, the **Name and Password **information of the** Administrator user** must be entered in the relevant fields that appear after turning the switchbox on.
3. The Target Type value should be selected as **Single Device**.
4. Enter the device information where IIS is installed.
5. If all value fields are filled, the configuration will be completed upon clicking **Save**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/iQInhPB3wQO0BaV2MymES_image.png)

1. Navigate to the Vault Screen and select the **Vault** account.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ReAmOd4io4QI0AW0CsGa8_image.png" size="86" width="816" height="359" position="center" showCaption="false"}

- Click the actions button and a new popup will be shown .

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/t4RIseeM5Vt2pNNyurQBv_image.png" size="60" width="770" height="610" position="center" caption="Vault Actions Screen" showCaption="true"}

If **Reset Password** or **Update Password** is clicked, the system will change the password information from Windows Local User or Active Directory for the selected account. Additionally, a new Application Trigger record will be created to change the password from the IIS server.

After opening the Application Management screen, the record can be listed. To start this record and change the password from the IIS Site immediately, the **Run **button needs to be clicked. If not, the Application Trigger job will automatically run this record according to the defined period.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/IbLymNik6cZFXd1CCerVU_image.png)